Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-06-26 10:37:10.240 00:01:00.060 TCP 10.154.0.1:40413 -> 10.155.0.1:179 4 246 1 2025-06-26 10:39:31.428 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:47560 1 40 1 2025-06-26 10:39:16.577 00:00:14.494 TCP 10.104.0.1:47560 -> 1.101.0.1:3000 67 4802 1 2025-06-26 10:39:31.429 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:47560 1 40 1 2025-06-26 10:39:16.578 00:00:14.494 TCP 10.104.0.1:47560 -> 1.101.0.1:3000 67 4802 1 2025-06-26 10:40:24.419 00:00:11.526 TCP 10.104.0.1:54456 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:40:24.421 00:00:11.526 TCP 10.104.0.1:54456 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:37:06.431 00:03:39.360 TCP 10.154.0.1:179 -> 10.152.0.1:36839 12 700 1 2025-06-26 10:37:06.421 00:03:39.369 TCP 10.152.0.1:36839 -> 10.154.0.1:179 12 859 1 2025-06-26 10:38:10.241 00:02:36.244 TCP 10.154.0.1:40413 -> 10.155.0.1:179 20 1072 1 2025-06-26 10:38:06.431 00:02:39.360 TCP 10.154.0.1:179 -> 10.152.0.1:36839 10 577 1 2025-06-26 10:38:06.420 00:02:39.370 TCP 10.152.0.1:36839 -> 10.154.0.1:179 10 736 1 2025-06-26 10:39:10.240 00:01:36.244 TCP 10.154.0.1:40413 -> 10.155.0.1:179 18 949 1 2025-06-26 10:36:56.305 00:05:10.007 OSPF 10.0.6.2:0 -> 224.0.0.5:0 32 2176 1 2025-06-26 10:41:25.985 00:00:11.641 TCP 10.104.0.1:48510 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:41:38.010 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:48510 1 40 1 2025-06-26 10:41:25.986 00:00:11.641 TCP 10.104.0.1:48510 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:41:38.009 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:48510 1 40 1 2025-06-26 10:37:46.307 00:05:10.006 OSPF 10.0.6.2:0 -> 224.0.0.5:0 32 2176 1 2025-06-26 10:42:27.663 00:00:11.629 TCP 10.104.0.1:53132 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:42:28.548 00:00:11.793 TCP 12.102.0.1:53540 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:42:27.664 00:00:11.629 TCP 10.104.0.1:53132 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:42:28.548 00:00:11.793 TCP 12.102.0.1:53540 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:43:29.334 00:00:11.662 TCP 10.104.0.1:56058 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:43:30.373 00:00:11.819 TCP 12.102.0.1:36770 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:43:29.333 00:00:11.661 TCP 10.104.0.1:56058 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:43:29.719 00:00:11.658 TCP 1.101.0.1:3000 -> 10.104.0.1:56058 10 9306 1 2025-06-26 10:43:29.719 00:00:11.658 TCP 1.101.0.1:3000 -> 10.104.0.1:56058 10 9306 1 2025-06-26 10:43:30.374 00:00:11.818 TCP 12.102.0.1:36770 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:44:31.443 00:00:11.630 TCP 1.101.0.1:3000 -> 10.104.0.1:59216 11 9346 1 2025-06-26 10:44:32.230 00:00:11.801 TCP 12.102.0.1:34792 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:44:31.061 00:00:11.630 TCP 10.104.0.1:59216 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:44:31.442 00:00:11.631 TCP 1.101.0.1:3000 -> 10.104.0.1:59216 11 9346 1 2025-06-26 10:44:32.230 00:00:11.802 TCP 12.102.0.1:34792 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:44:31.061 00:00:11.631 TCP 10.104.0.1:59216 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:40:47.857 00:05:00.163 TCP 10.158.0.1:179 -> 10.152.0.1:34383 35 2148 1 2025-06-26 10:40:47.856 00:05:00.165 TCP 10.158.0.1:179 -> 10.152.0.1:34383 35 2148 1 2025-06-26 10:45:32.727 00:00:11.648 TCP 10.104.0.1:60428 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:45:33.120 00:00:11.637 TCP 1.101.0.1:3000 -> 10.104.0.1:60428 11 9346 1 2025-06-26 10:45:33.119 00:00:11.637 TCP 1.101.0.1:3000 -> 10.104.0.1:60428 11 9346 1 2025-06-26 10:40:47.423 00:06:00.065 TCP 10.154.0.1:37073 -> 10.152.0.1:179 41 2466 1 2025-06-26 10:40:47.195 00:06:00.127 TCP 10.153.0.1:36371 -> 10.152.0.1:179 43 3564 1 2025-06-26 10:40:47.433 00:06:00.045 TCP 10.152.0.1:179 -> 10.154.0.1:37073 35 5138 1 2025-06-26 10:40:47.206 00:06:00.086 TCP 10.152.0.1:179 -> 10.153.0.1:36371 42 5502 1 2025-06-26 10:40:47.778 00:06:00.186 TCP 10.155.0.1:41995 -> 10.154.0.1:179 33 4614 1 2025-06-26 10:45:32.728 00:00:11.648 TCP 10.104.0.1:60428 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:40:47.422 00:06:00.065 TCP 10.154.0.1:37073 -> 10.152.0.1:179 41 2466 1 2025-06-26 10:40:47.194 00:06:00.127 TCP 10.153.0.1:36371 -> 10.152.0.1:179 43 3564 1 2025-06-26 10:40:47.432 00:06:00.045 TCP 10.152.0.1:179 -> 10.154.0.1:37073 35 5138 1 2025-06-26 10:40:47.205 00:06:00.086 TCP 10.152.0.1:179 -> 10.153.0.1:36371 42 5502 1 2025-06-26 10:40:47.776 00:06:00.186 TCP 10.155.0.1:41995 -> 10.154.0.1:179 33 4614 1 2025-06-26 10:42:16.313 00:05:10.002 OSPF 10.0.6.2:0 -> 224.0.0.5:0 32 2176 1 2025-06-26 10:46:46.455 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:55118 1 40 1 2025-06-26 10:46:35.920 00:00:11.817 TCP 12.102.0.1:59628 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:46:34.424 00:00:11.642 TCP 10.104.0.1:55118 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:46:46.456 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:55118 1 40 1 2025-06-26 10:46:35.919 00:00:11.818 TCP 12.102.0.1:59628 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:46:34.423 00:00:11.642 TCP 10.104.0.1:55118 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:43:06.314 00:05:10.007 OSPF 10.0.6.2:0 -> 224.0.0.5:0 32 2176 1 2025-06-26 10:47:36.095 00:00:11.634 TCP 10.104.0.1:43526 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:47:36.095 00:00:11.633 TCP 10.104.0.1:43526 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:48:49.829 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:60036 1 40 1 2025-06-26 10:48:37.763 00:00:11.672 TCP 10.104.0.1:60036 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:48:37.763 00:00:11.672 TCP 10.104.0.1:60036 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:48:49.828 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:60036 1 40 1 2025-06-26 10:49:39.867 00:00:11.590 TCP 1.101.0.1:3000 -> 10.104.0.1:46210 10 9306 1 2025-06-26 10:49:39.485 00:00:11.589 TCP 10.104.0.1:46210 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:49:41.367 00:00:11.749 TCP 12.102.0.1:46560 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:49:39.867 00:00:11.589 TCP 1.101.0.1:3000 -> 10.104.0.1:46210 10 9306 1 2025-06-26 10:49:41.368 00:00:11.749 TCP 12.102.0.1:46560 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:49:39.486 00:00:11.589 TCP 10.104.0.1:46210 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:50:43.155 00:00:11.789 TCP 12.102.0.1:60304 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:50:41.113 00:00:11.631 TCP 10.104.0.1:53572 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:50:41.495 00:00:11.630 TCP 1.101.0.1:3000 -> 10.104.0.1:53572 10 9306 1 2025-06-26 10:50:43.154 00:00:11.789 TCP 12.102.0.1:60304 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:50:41.113 00:00:11.630 TCP 10.104.0.1:53572 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:50:41.495 00:00:11.631 TCP 1.101.0.1:3000 -> 10.104.0.1:53572 10 9306 1 2025-06-26 10:46:48.021 00:06:00.003 TCP 10.158.0.1:179 -> 10.152.0.1:34383 7 497 1 2025-06-26 10:46:48.021 00:06:00.003 TCP 10.158.0.1:179 -> 10.152.0.1:34383 7 497 1 2025-06-26 10:47:36.316 00:05:10.007 OSPF 10.0.6.2:0 -> 224.0.0.5:0 32 2176 1 2025-06-26 10:51:42.797 00:00:11.645 TCP 10.104.0.1:49140 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:51:43.179 00:00:11.646 TCP 1.101.0.1:3000 -> 10.104.0.1:49140 10 9306 1 2025-06-26 10:51:42.797 00:00:11.646 TCP 10.104.0.1:49140 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:51:43.179 00:00:11.645 TCP 1.101.0.1:3000 -> 10.104.0.1:49140 10 9306 1 2025-06-26 10:48:26.320 00:05:10.003 OSPF 10.0.6.2:0 -> 224.0.0.5:0 32 2176 1 2025-06-26 10:47:47.465 00:06:00.034 TCP 10.154.0.1:37073 -> 10.152.0.1:179 14 861 1 2025-06-26 10:47:47.244 00:06:00.078 TCP 10.153.0.1:36371 -> 10.152.0.1:179 14 861 1 2025-06-26 10:47:47.254 00:06:00.037 TCP 10.152.0.1:179 -> 10.153.0.1:36371 8 549 1 2025-06-26 10:47:47.859 00:06:00.103 TCP 10.155.0.1:41995 -> 10.154.0.1:179 14 861 1 2025-06-26 10:47:47.488 00:06:00.001 TCP 10.152.0.1:179 -> 10.154.0.1:37073 7 497 1 2025-06-26 10:47:47.465 00:06:00.035 TCP 10.154.0.1:37073 -> 10.152.0.1:179 14 861 1 2025-06-26 10:47:47.245 00:06:00.077 TCP 10.153.0.1:36371 -> 10.152.0.1:179 14 861 1 2025-06-26 10:47:47.488 00:06:00.002 TCP 10.152.0.1:179 -> 10.154.0.1:37073 7 497 1 2025-06-26 10:47:47.255 00:06:00.037 TCP 10.152.0.1:179 -> 10.153.0.1:36371 8 549 1 2025-06-26 10:47:47.860 00:06:00.103 TCP 10.155.0.1:41995 -> 10.154.0.1:179 14 861 1 2025-06-26 10:52:44.485 00:00:11.632 TCP 10.104.0.1:35888 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:52:46.794 00:00:11.811 TCP 12.102.0.1:40620 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:52:44.483 00:00:11.633 TCP 10.104.0.1:35888 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:52:46.792 00:00:11.811 TCP 12.102.0.1:40620 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:53:46.154 00:00:11.638 TCP 10.104.0.1:40716 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:53:46.534 00:00:11.639 TCP 1.101.0.1:3000 -> 10.104.0.1:40716 10 9306 1 2025-06-26 10:53:46.534 00:00:11.639 TCP 1.101.0.1:3000 -> 10.104.0.1:40716 10 9306 1 2025-06-26 10:53:46.152 00:00:11.638 TCP 10.104.0.1:40716 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:54:47.851 00:00:11.650 TCP 10.104.0.1:40028 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:54:47.853 00:00:11.649 TCP 10.104.0.1:40028 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:54:50.478 00:00:11.789 TCP 12.102.0.1:58050 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:54:50.477 00:00:11.790 TCP 12.102.0.1:58050 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:55:49.548 00:00:11.626 TCP 10.104.0.1:33310 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:55:49.548 00:00:11.626 TCP 10.104.0.1:33310 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:56:51.211 00:00:11.658 TCP 10.104.0.1:35080 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:57:03.250 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:35080 1 40 1 2025-06-26 10:57:03.250 00:00:00.000 TCP 1.101.0.1:3000 -> 10.104.0.1:35080 1 40 1 2025-06-26 10:56:54.120 00:00:11.812 TCP 12.102.0.1:57358 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:56:51.211 00:00:11.657 TCP 10.104.0.1:35080 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:56:54.121 00:00:11.812 TCP 12.102.0.1:57358 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:52:56.324 00:05:10.009 OSPF 10.0.6.2:0 -> 224.0.0.5:0 32 2176 1 2025-06-26 10:53:46.324 00:05:10.013 OSPF 10.0.6.2:0 -> 224.0.0.5:0 32 2176 1 2025-06-26 10:57:52.901 00:00:11.631 TCP 10.104.0.1:40788 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:57:52.900 00:00:11.632 TCP 10.104.0.1:40788 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:57:55.983 00:00:11.815 TCP 12.102.0.1:46816 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:57:55.982 00:00:11.815 TCP 12.102.0.1:46816 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:53:48.024 00:06:00.001 TCP 10.158.0.1:179 -> 10.152.0.1:34383 7 497 1 2025-06-26 10:53:48.024 00:06:00.001 TCP 10.158.0.1:179 -> 10.152.0.1:34383 7 497 1 Summary: total flows: 123, total bytes: 306409, total packets: 1902, avg bps: 1787, avg pps: 1, avg bpp: 161 Time window: 2025-06-26 10:36:56 - 2025-06-26 10:59:48 Total flows processed: 123, passed: 123, Blocks skipped: 0, Bytes read: 12856 Sys: 0.0025s User: 0.0008s Wall: 0.0020s flows/second: 61285.3 Runtime: 0.0020s